Network Security Engineer

Seeking a Network & Security Engineer to support and enhance mission-critical global banking infrastructure, with hands-on expertise in enterprise networking (LAN/WAN, VPN, DMZ), routing protocols, and security platforms including Fortinet, F5, and Arista switching . The role requires experience operating in a highly regulated financial environment with strong focus on resilience, security, and 24/7 production support.

In this role, the person is responsible for engineering and administrating Network infrastructure. Ability to support large enterprise mission critical networks and develop new technology solutions. Provide technical expertise in working with clients and other GS-IT groups on network issues.

Key activities / Essential duties and responsibilities

· Administer all network infrastructures -LAN, MAN, WAN, VPN and DMZ’s including production

support, fault and performance monitoring, improvements and capacity planning.

· Analyze & monitor networks continuously.

· Analyze and audit overall network security.

· Global network responsibilities –follow the sun.

· Engineer, design and implement best practices solutions for network connectivity and firewalled.

DMZ’s

· Provide connectivity solutions to internal customers – application developers and systems.

analysts, other infrastructure team members, first line support teams

· Make recommendations to management regarding best practices for maintaining the network to

meet business requirements.

· Project managing infrastructure deployments, network migration, network design, setup IP.

internetworking with third party, etc.

· Ensure compliance with Corporate Security policies and procedures.

· Comply with network Corporate Change Control policies and procedures.

· Troubleshoot networks, proxy, f5, firewall, DNS, external vendor and internet connectivity issues.

· Firewall rule implementations and DMZ builds –internet and market data on Fortinet FortiGate

appliances.

· Implement and support Arista product line -Catalyst switches, routers, etc.

· Implement and support routing protocols: BGP, OSPF, PIM, etc.

· Administer firewalls, f5 load balancers, and FortiGate Proxies

· Administering of network monitoring tools - Command, Stablenet, etc.

· Keep thorough and current network infrastructure documentation –Visio, etc.

· Off hours and weekend support required.

· 75% network administration – 15% firewall security – 10% voice support

Key Requirements (education, work experience, further qualifications)

· Excellent communication, interpersonal, organizational and documentation skills

· Good understanding of more advanced or recent routing and transport protocols at various levels

of the OSI layer

· Current on networking and firewall trends in architecture and design

· Good working knowledge of UNIX (Solaris and Linux), Windows and telecom equipment.

· Understanding of VPN concepts, protocols and implementations

· Network experience with the Financial Industry’s unique requirements. Mark trends as well as

firewall architectures

· Experience with Fortinet Fortigate firewalls.

· At least Arista Level (ACE-A / L1) or (L3) certification.

· Over 5 years of experience in a similar position

· Experience with project management